CVE-2006-4311 | BDVDB-2026-18803 Detail
Description#
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/19597
- http://www.vupen.com/english/advisories/2006/3334
- http://secunia.com/advisories/21553
- http://www.securityfocus.com/archive/1/443701/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28464
- http://www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Version_0.2_%28folder%29_RFI.htm
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.